AI Weekly Wrap: Mistral Opens Large 4, Canada Backs Cohere
This week's five stories share one thread: who gets access to AI that is good at finding and fixing software flaws. Mistral put a trillion-parameter model's weights online, Google kept its newest model for vetted defenders, and CrowdStrike reported attackers using AI agents. Canada, meanwhile, moved to own part of a home-grown lab.
Key takeaways
- Europe: Mistral released the weights of Large 4 on 29 October under a modified MIT licence and priced the hosted model at $0.70 per million input tokens [1]. Its benchmark claims are Mistral's own.
- US: Google says Gemini 4 Carbon ranks first on the Artificial Analysis index but is available only to a subset of cyber defenders for now [3].
- China-nexus: CrowdStrike says a group it calls VAPOR PANDA ran an AI-agent framework against more than 200 organisations from 17 October [4].
- Canada: the Government of Canada says it will take an equity stake of up to about C$1.6 billion in Cohere, in stages [5].
1. Mistral opens Large 4 (Europe)
Mistral AI released the weights of Mistral Large 4 on 29 October. It is a 1-trillion-parameter, multimodal model that Mistral says is trained in Europe [1]. The licence is a modified MIT licence: free to use, modify and sell, but a business offering the model as a hosted service must buy a separate licence from Mistral [1].
On the Artificial Analysis Coding Agent Index, Mistral reports 48%, effectively tied with the open-weight leader GLM-5.3, with 47% fewer tokens per task [1]. TechCrunch wrote that Large 4 outranks all other open models on that index [2]; Mistral's own page says "tied", so we use that wording. We found no independent rerun yet.
Mistral also says that, since its preview, it saw "potential for uplift" for real attacks in live traffic and is tightening guardrails, and that a specialised cyber variant goes only to vetted partners [1].
2. Google gates Gemini 4 Carbon (US)
Google announced Gemini 4 Carbon on 28 October and says it ranks first on version 5.0 of the Artificial Analysis Intelligence Index, at 59 [3]. Google reports 88.2% on SEC-bench Pro (finding vulnerabilities), 54.8% on ExploitGym and 71.0% on CWE-bench (patching) [3]. These are Google's figures.
Access starts with a subset of cyber defenders through its Fairwind Program, and Google says it is in the US government's voluntary pre-release testing. It gives no date for wider release [3]. The introductory price is $2 per million input tokens and $10 per million output tokens, rising to $4 and $20 later [3].
3. CrowdStrike reports AI-run intrusions (China-nexus)
CrowdStrike published on 29 October that, from 17 October, a group it tracks as VAPOR PANDA used the ARTEX agent framework against more than 200 organisations in at least 14 countries over 11 days [4]. It confirmed deeper access at nine organisations [4]. The attribution is CrowdStrike's own assessment. We did not review a response from China or DeepSeek.
CrowdStrike says the agents ran mainly on the DeepSeek model plus a second commercial model it could not identify, with a human operator giving instructions in Chinese [4]. It calls this an escalation from single intrusions to several at once. This follows our 28 October report on agents reaching real systems.
4. Canada takes a stake in Cohere (Canada)
The Government of Canada announced on 29 October an equity investment of up to about C$1.6 billion in Cohere, made in stages and described as a commercial investment [5]. In return Cohere must keep its Canadian incorporation and headquarters and commit at least C$1.7 billion to additional computing infrastructure in Canada by 2030 [5]. Semafor, a US outlet, put the stake at up to $1.1 billion [7].
The stake is part of a Series E round led by Germany's Schwarz Group. Cohere announced an initial close and is seeking up to C$7 billion at a valuation of nearly C$36 billion, BetaKit reports [6]. Nvidia and Bell are among the investors named by the government [5]. The full C$7 billion is a target, not money raised.
5. Big Tech keeps spending (US)
Alphabet reported third-quarter revenue of $127.6 billion on 28 October, with Google Cloud revenue of $30.7 billion, up 103%, and purchases of property and equipment of $51.4 billion in the quarter [8]. Microsoft reported $92.3 billion revenue for its first fiscal quarter, Azure up 48%, and $39.4 billion of property and equipment additions [9]. Both are company-reported figures.
The rest of our week
Earlier this week we covered debt and guarantees behind AI compute (26 October), Moonshot's Kimi K3.1 Pro (27 October), government responses to agent breaches in the EU, India and Australia (28 October), and physical AI in Japan, Korea and China (29 October). Russia and the CIS had no verifiable story this week, and the Gulf was last covered on 25 October.
What to watch next
- Kimi K3.1 Pro weights: Moonshot promised them by 4 November; the licence is still unknown.
- Mistral Large 4: a technical report is "coming soon" [1]; watch for independent runs.
- Gemini 4 Carbon: Google says it will widen access "as soon as possible" [3].
- Cohere: whether the round reaches its C$7 billion target [6].
Our take
Our analysis: the week shows two ways to handle the same risk. Mistral argues defenders need open models they can run themselves; Google argues a strong cyber model should go to vetted users first. CrowdStrike's report suggests attackers do not wait for either: it describes them stitching together open software and commercial subscriptions. The policy test is whether either approach can be checked by outsiders.
FAQ
Is Mistral Large 4 fully open source? Its weights are public under a modified MIT licence. Companies selling it as a hosted service need a separate licence [1].
Can anyone use Gemini 4 Carbon now? No. Google limits it to a subset of cyber defenders and partners at first [3].
Does CrowdStrike say DeepSeek took part? No. It says the group used DeepSeek's model as a tool [4].
Sources
- Mistral Large 4 (Le Chonk) is now open weight, Mistral AI, 29 October 2026. Primary (company claims).
- Mistral releases weights for its trillion-parameter AI model, TechCrunch, 29 October 2026.
- Gemini 4 Carbon: our next frontier model, Google, 28 October 2026. Primary (company claims).
- VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaign, CrowdStrike, 29 October 2026. Primary (vendor assessment).
- Canada announces landmark investment in Cohere to scale secure, sovereign AI, Prime Minister of Canada, 29 October 2026. Primary.
- Feds to buy stake in Cohere via planned $7-billion Series E at $36-billion valuation, BetaKit, 29 October 2026.
- Canada to take equity stake in AI firm, Semafor, 29 October 2026.
- Alphabet Q3 2026 results (Exhibit 99.1), Alphabet via SEC, 28 October 2026. Primary.
- FY27 Q1 press release, Microsoft Investor Relations, 28 October 2026. Primary.
AI Worldwire is independent and has no commercial relationship with the companies covered, unless stated. Research and drafting are assisted by AI; every article is reviewed and approved by a human editor before publication. Subscribe to the AI Worldwire newsletter. Last updated: 30 October 2026.